Add measured source attestation route (#1)

chore(deploy): sync build definition from szl-holdings/immune@de9f06394535a0bda70dc84f84ca9874224e8c66

Wave1: add interoperable in-toto/SLSA DSSE attestation frontier (attest routes + AttestationPanel); rev g-attest

IMMUNE frontier: RFC 6962 append-only (consistency) proofs, browser-verified

IMMUNE frontier: RFC 6962 Merkle inclusion proofs (/anchor/tree, /anchor/proof/:seq) + in-browser verifier; rev 2026-07-08e-merkle

External witnessing: anchor ledger root into public Sigstore Rekor log (rev 2026-07-08d-anchor)

Cache-bust rebuild (fresh container) — clean 6-entry seed

Deploy IMMUNE investor demo: real SHA-256 receipt chain + live Rekor/ATLAS/OWASP intel (doctrine v11, honest provenance)